| 摘要: |
| 当前 ,网上出现了一种基于 TCP的主动攻击 ,称为 IP劫持 .这种攻击不同于以往的基于网络侦听的被动式网络攻击 ,它能绕过系统口令和 S/ KEY口令保护的防御 ,将网络连接完全接管 ,对网络安全造成了重大威胁 .该文分析了这种攻击的实施原理 ,并提出了针对这种攻击的检测方法和防御技术. |
| 关键词: IP TCP IP劫持 网络监视器 连接非同步 |
| DOI： |
| 分类号: |
| 基金项目:本文研究得到国家863高科技项目基金(No.86 3-306-ZT02-03-01)资助. |
|
| Study on IP Hijack |
|
ZHAO Xin,CHEN Dao xu,XIE Li
|
| Abstract: |
| There is a kind of active attack based on TCP over the Internet, which is called IP Hijack. This kind of attack is different from the passive attack based on network sniffing. It can bypass the protection of system password and S/KEY, and get full control of the link between two end points. This can cause great harm to the network system. In this paper, the principle of this kind of attack is analyzed, the attack detecting technology and the protecting measures against IP Hijack are also given. |
| Key words: IP TCP IP hijack network monitor link desynchronization |
